<html>
<head><meta charset="utf-8"><title>runtime sandboxing · wg-secure-code · Zulip Chat Archive</title></head>
<h2>Stream: <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/index.html">wg-secure-code</a></h2>
<h3>Topic: <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/runtime.20sandboxing.html">runtime sandboxing</a></h3>

<hr>

<base href="https://rust-lang.zulipchat.com">

<head><link href="https://rust-lang.github.io/zulip_archive/style.css" rel="stylesheet"></head>

<a name="182384602"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/runtime%20sandboxing/near/182384602" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Stuart Small <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/runtime.20sandboxing.html#182384602">(Dec 02 2019 at 20:13)</a>:</h4>
<p>I wanted to keep yall up to date on something I've been working on.  Partially inspired by the buidltime sandboxing thread I started playing with a run time sandbox env for HTTP handlers.  The main idea is to explicitly allow the framework to build in RASP like functionality without some of the sketchy runtime instrumentation and byte code injection most RASPs out there use.  Figure it might be of interest to this group eventually but I've got <em>a lot</em> more work to do on it</p>



<a name="182384797"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/runtime%20sandboxing/near/182384797" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Stuart Small <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/runtime.20sandboxing.html#182384797">(Dec 02 2019 at 20:15)</a>:</h4>
<p>I'm building it on top of wasm but getting interface types to play well with hostfuncs is requiring a lot of research and education.  I think once it makes sense it should be more straightforward.</p>



<a name="182400231"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/runtime%20sandboxing/near/182400231" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Tony Arcieri <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/runtime.20sandboxing.html#182400231">(Dec 02 2019 at 23:21)</a>:</h4>
<p>nice. are you using <code>wasmtime</code> or what?</p>



<a name="182400314"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/runtime%20sandboxing/near/182400314" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Stuart Small <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/runtime.20sandboxing.html#182400314">(Dec 02 2019 at 23:22)</a>:</h4>
<p>Yup.  Wasmtime.  It's really well put together project</p>



<a name="182400351"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/runtime%20sandboxing/near/182400351" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Stuart Small <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/runtime.20sandboxing.html#182400351">(Dec 02 2019 at 23:23)</a>:</h4>
<p>It looks like it supports everything I need but this project is like diving straight into the deepest end I could find of wasm</p>



<a name="182400352"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/runtime%20sandboxing/near/182400352" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Tony Arcieri <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/runtime.20sandboxing.html#182400352">(Dec 02 2019 at 23:23)</a>:</h4>
<p>nice, I've been meaning to play with it</p>



<a name="182400417"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/runtime%20sandboxing/near/182400417" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Stuart Small <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/runtime.20sandboxing.html#182400417">(Dec 02 2019 at 23:24)</a>:</h4>
<p>They are extremely helpful on gitter and sunfishcode has a lot of great general wasm documentation</p>



<a name="182400422"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/runtime%20sandboxing/near/182400422" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Stuart Small <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/runtime.20sandboxing.html#182400422">(Dec 02 2019 at 23:24)</a>:</h4>
<p>It's better than the spec itself</p>



<a name="182400435"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/runtime%20sandboxing/near/182400435" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Tony Arcieri <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/runtime.20sandboxing.html#182400435">(Dec 02 2019 at 23:24)</a>:</h4>
<p>haha</p>



<hr><p>Last updated: Aug 07 2021 at 22:04 UTC</p>
</html>